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1NT11K SPKCIFldATlOW: 



Ple ase replace the paragraph on page 1. lines 5-7, with the following rewrit ten paragraph: 
TECHNIC AL V WihD: 

The present invention relates to a' method and an apparatus for controlling access to the 
contents of web pages by using mobile security modules and in particular chip cards. 



a- 



Please replace Ihc paragraph on page 1, line 8, lo page 2, line 5, with the following 
rewritten paragraph: 



HACKLGRQUND OF T H li I NVRNTfON: 

The internet, i.e. the World Wide Web, has become a new infonnation-disscminating and 
business medium. The increasing commercialization oClhc internet is constantly giving 
^ rise lo ideas Tor new types of business which can bo transacted over the internet, liven 

today, Ihc internet user can perform virtually all tlie commercial transactions involved in 
ordinary everyday life over the internet. In (be business world too the internet has 
become an indispensable tool. Companies use ihc* internet both for developing and for 
marketing their products. 



Please replace Ihc paragraph Oix page 5, lines 8-10, with the following rewritten 
paragraph: 



SUMM ARY O F 1HR INV ENTION: 

The object of the present invention is to provide it method and an apparatus which avoid 
the disadvantages, as outlined above, of the prior art for achieving authentication between 
cli ent and server. 



Please replace the paragraph on page 5, lines 11-13, with Ihc following rewritten 
paragraph; 



This object is and other, a-ehieve^y^neans ot^thc: fettto^^escribed-i^-^ mici 1, l-S r 17 T ^ (J 0 ^ 
qJ\ 48 r and-20,- Other advantageous embodiments of the present invention are described in i^kt $ev\$e 

thetiubelaims instant claims . 
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Please replace the paragraph on page 5, line 19, to page 6, line 4, with the following 
rewritten paragraph: 



of 



M^LLlM^CRT^riON OP TU B DRAWING S: 

The present invention will be described by reference to a preferred embodiment and lo 
the drawings, in which: 

Pig. 1 shows the components on which the present invention is based, and 
Fig. 2 shows Ihe method according to the invention for authentication and access 
control. 



Please reduce the paragraph on page 6, lines 5-20, with the following rewritten 
paragraph: .- 



DPTAHAU) I NSCRIPTION OP Tl I K PREFERR ED EMBODIMENT S: 
Pig. 1 shows U io components for implementing the present invention. Installed on the 
client side there arc u data-processing unit with a browser, a card reader and a mobile 
security module, e.g. a chip card. The browser is capable of displaying HTML pages and 
of running applets in its virtual machine (JVM =» Java virtual machine). Applets are 
programs written in the Java programming language which are downloaded from the web 
server together with the web page. The function which the applets perform is to 
communicate with the chip card, e.g. by using APDU's (" application protocol data 
units). To communicate with the card, the applet requires a program library. This is 
necessary because communication is not one of the browser's standard functions. The 
chip card needs Lo be capable of calculating a cryptographic checksum or generating a 
digital signature by means of a key. The key is located in a protected area of the chip 
card. In addition to this, the individual number of the card is preferably also stored on it. 
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